
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
node-websocketd
Advanced tools
Redirect all data from the STDOUT of a process to a WebSocket server. Inspired by websocketd. Basicly it executes the selected process when someone access successfully to your WebSocket and redirects all the STDOUT data back to the client. Has the option to run a secure WebSocket server (TLS) and you can also set a password for accessing the WebSocket data.
Node and NPM are required.
npm install -g node-websocketd
$ node-websocketd --help
--ssl, --https Add https support [boolean]
--ssl-key, --key Route to SSL key (required if ssl flag)
--ssl-cert, --cert Route to SSL certificate (required if ssl
flag)
--ssl-passphrase, --passphrase Specifies SSL private passphrase
--port Set the port to listen [default: 8080]
-e, --exec Set the command you want to execute[required]
-p, --password Set a specific password to the WebSocket
server
You can also set arguments with ENV variables. Just set the argument name you want with the prefix NWS_.
Starting a basic WebSocket server from a specified process:
node-websocketd -e=./examples/myShellScript.sh
Starting a basic WebSocket server from a specified process in a specified port:
node-websocketd -e=./examples/myShellScript.sh --port 9999
Starting a WebSocket server protected with a specified password from a specified process (the process will not execute until recieve the correct password):
node-websocketd -e=./examples/myShellScript.sh -password secr3tp4ssw0rd_123
Starting a TSL WebSocket server from a specified process in a specified port:
node-websocketd -e=./examples/myShellScript.sh --port 9999 --ssl --ssl-key=cert/server.key --ssl-cert=cert/server.crt --ssl-passphrase=123412341234
Starting a TSL WebSocket server from a specified process in a specified port with a specified password (recomended when dealing with sensible data):
node-websocketd -e=./examples/myShellScript.sh --port 9999 --ssl --ssl-key=cert/server.key --ssl-cert=cert/server.crt --ssl-passphrase=123412341234 --password secr3tp4ssw0rd_123
Setting arguments with ENV variables:
NWS_EXEC=./examples/myShellScript.sh NWS_P=9999 NWS_PASSWORD=secr3tp4ssw0rd_123 NWS_SSL=true NWS_SSL_KEY=cert/server.key NWS_SSL_CERT=cert/server.crt NWS_SSL_PASSPHRASE=123412341234 node-websocketd
FAQs
Redirect all from STDOUT to a websocket server.
The npm package node-websocketd receives a total of 7 weekly downloads. As such, node-websocketd popularity was classified as not popular.
We found that node-websocketd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.